Privacy Policy

Effective Date: 01/07/2026

1. Introduction

Welcome to JustEmbed ("we," "our," or "us"). We are committed to protecting your privacy in compliance with the General Data Protection Regulation (EU GDPR). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our SaaS dashboard, or interact with our embeddable widgets.

JustEmbed is a social feed aggregator that allows users to connect social media and review platforms (such as Instagram, Facebook, Google Reviews, Yelp, and Trustpilot) and embed these feeds on their own websites.

2. Information We Collect

A. Information You Provide to Us

  • Account Information: When you register for an account via Google OAuth, Meta OAuth, or Magic Link (email), we collect your email address, name, and profile picture provided by the authentication provider.
  • Payment Information: If you subscribe to a paid plan, our payment processor (Stripe) collects your billing and payment information. We do not store full credit card numbers on our servers.
  • Connected Accounts Data: When you link third-party accounts (e.g., Instagram, Facebook) to aggregate feeds, we receive OAuth tokens to access public and authorized data from those platforms on your behalf.

B. Information Collected Automatically

  • Dashboard Usage: We collect standard log data when you access our dashboard, including IP addresses, browser types, and usage timestamps. This is used for rate limiting, security, and service improvement.
  • Widget Analytics: Our embeddable widget collects anonymized, first-party analytics (such as impressions, clicks, and shoppable link clicks) to provide performance metrics to our users.

3. Zero-Cookie Widget Policy

Our embeddable widget is designed to be privacy-safe and GDPR-compliant by default.

  • No Cookies: The JustEmbed widget sets zero cookies on the end-user’s browser.
  • First-Party Analytics: All widget analytics are transmitted to the same origin via the Beacon API without cross-site tracking or third-party pixels.
  • Consent Detection: The widget operates in a privacy-safe mode, delaying any third-party network requests (e.g., loading images directly from social platforms) until consent is verified via the host website's Consent Management Platform (CMP).

4. How We Use Your Information

We use the collected information for various purposes, including to:

  • Provide, operate, and maintain our services.
  • Process transactions and send related billing information.
  • Authenticate users and secure our platform.
  • Fetch and display the social feeds you have configured.
  • Analyze usage patterns to improve our product.
  • Communicate with you regarding updates, support, and marketing (if opted in).

5. Sharing Your Information

We do not sell your personal data. We may share information with:

  • Service Providers: Third-party vendors that assist us with infrastructure (Cloudflare), payments (Stripe), email delivery (Resend), and analytics.
  • Platform Integrations: Meta (Facebook/Instagram), Google, Yelp, and Trustpilot APIs as necessary to fetch feed data based on your configuration.
  • Legal Obligations: When required by law, subpoena, or other legal processes, or to protect the rights, property, and safety of JustEmbed, our users, or others.

6. Data Retention and Security

  • Security: We use industry-standard measures to protect your data, including storing OAuth tokens encrypted in our Cloudflare KV and enforcing rate limits. Sessions are securely managed without client-side cookies.
  • Retention: We retain your personal information only for as long as necessary. Your data is deleted immediately as soon as your account is deleted. If your subscription ends, your data is retained for 30 days before being deleted.

7. Your Data Protection Rights (GDPR)

Under the EU GDPR, you have the following rights:

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data ("Right to be Forgotten").
  • Objection & Restriction: Object to or restrict our processing of your personal data.

To exercise these rights, please contact us at the email address below.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Company Name: P.I.Graphic di Giulio Porta
Email: support@justembed.app
Address: Via G.Fossati 22, 28100 Novara (NO)